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1. Purpose of the policy 


This policy is about how the Information Commissioners Office (ICO) will 
meet its statutory obligation as a public record body under the terms of 
the Public Records Act 1958 (PRA). The PRA requires the ICO to: 


e Select records for permanent preservation, guided and supervised 
by the Keeper of Public Records. 

e Ensure the safekeeping of records. 

e Transfer selected records to The National Archives or an approved 
place of deposit by the due date. This applies unless they need to 
be retained. In this case, the approval of the Secretary of State for 
Digital, Culture, Media and Sport must be obtained. 

e Carry out formal applications for retention and closure through The 
National Archives. These are reviewed by The Advisory Council on 
National Archives and Records. 

e Dispose of records not selected for preservation by destruction or 
presentation to another institution. 


This high level methodology sets out how the ICO approaches appraisal 
and selection and will be supported by additional training and guidance 
resources. 


2. History of the ICO and our public task 


The ICO is the UK’s independent authority set up to uphold information 
rights in the public interest, promoting openness by public bodies and 
data privacy for individuals. Established in 1984 as the Data Protection 
Registrar, the name of the office was changed to the Data Protection 
Commissioner in 2000. In 2001 the office was given added responsibilities 
and changed its name to the Information Commissioners Office. 


The ICO is currently an executive non-departmental public body 
sponsored by the Department for Digital, Culture Media and Sport and is 
responsible for regulating the: 


e Data Protection Act 2018 

e UK General Data Protection Regulation 

e Freedom of Information Act 2000 

e Environmental Information Regulations 2004 

e Privacy and Electronic Communications Regulations 2003 

e Network and Information Systems regulations 2018 

e Infrastructure for Spatial Information in the European Community 
Regulations 2009 

e Re-use of Public sector Information Regulations 2015 
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e Investigatory Powers Act 2016 

e Electronic Identification and Trust Services for Electronic 
Regulations 2016 

e Enterprise Act 2002 


3. Our approach to appraisal and selection 


The ICO appraises and selects records for permanent preservation in line 
with The National Archives Records Collections Policy. Records selected 
are those that have long term historical value and show the significance 
of the functions and activities of the ICO. 


Appraisal and selection decisions are made at the highest possible level, 
initially at a department or function level, and then at series level. File 
level appraisal is avoided wherever possible and only carried out when 
absolutely necessary. 


Decisions about permanent preservation are made at the earliest possible 
opportunity with all ICO staff being responsible for identifying and 
preserving records that have long term historical value. 


4. Our records 


ICO records are organised according to function and we create both 
corporate and regulatory records. At a high level our records correspond 
to the following functions: 


Corporate Records Regulatory Records 

Human resources Enquiries and advice 

Business premises Complaint handling 

IT and business services Policy research and guidance 
development 

Finances Stakeholder engagement 

Constitution and governance | Public communications 

Management decisions Published guidance and resources 

Contracts Investigations and regulatory action 


5. Records we select for permanent preservation 


The ICO selects both corporate and regulatory records for permanent 
preservation that document its contribution to: 
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e The principal policies and actions of the UK central government and 


English and Welsh governments 


e The structures and decision-making processes in government 
e The state’s interaction with the lives of its citizens 


Selection is primarily from the following functions: 


Constitution and governance 


Records showing changes to the 
high level structure of the ICO and 
its responsibilities such as office 
wide strategic plans and 
correspondence with DCMS. 


Management decisions 


Records that show decisions made 
at senior levels of the ICO such as 
Management board, Senior 
Leadership Team and Executive 
Team minutes. 


Enquiries, advice and complaint 
handling 


High profile casework. Upper 
tribunal and court of appeal cases. 


Stakeholder Engagement, 
Policy research and guidance 
development 


Interactions with key stakeholders 
in relation to interpreting Data 
Protection and Freedom of 
Information Acts, Codes of Practice 
relating to acts, legislative 
development and significant 
internal advice. Legal Advice to the 
Commissioner (where it is directly 
related to information rights 


policy). 


Public communications and 
published guidance and 
resources 


Investigations and regulatory 
action 


Communications to the public 
through official ICO channels such 
as the ICO website and social 
media. 

Civil monetary penalty cases, PECR 
Breach logs. Section 170 DPA and 
Section 77 FOIA. 


6. ICO website and social media channels 


ICO web material has been captured by The National Archives from our 
website since 2006 as part of the UK Government Web Archive. Firstly as 
www.ico.gov.uk and from 2013 onwards as www.ico.org.uk. The website 
is currently captured multiple times per year. 
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The National Archives is also capturing the ICO Twitter feed and YouTube 
channel. 


7. Records we don’t select for permanent preservation 


We don’t select records for transfer to The National Archives or another 
approved place of deposit that have no enduring historical value and fall 
outside the scope of The National Archives records collection policy. 


Records from the Human Resources, business premises, IT and business 
services, finances and contracts functions will usually not be required for 
permanent preservation. 


We retain these records only for as long as is needed for business, legal 
or historical purposes and records that are no longer required are 


disposed of in line with our Retention and Disposal Schedule. 


8. Document Version control 


Version Changes Made Date Made by 

V0.1 First draft 21/07/2021 Steven Johnston 

V1.0 Published 17/02/2022 Iman El 
Mehdawy 
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